<?php

/*
 * Poweradmin, a friendly web-based admin tool for PowerDNS. See <http://www.poweradmin.org> for more details. Copyright 2007-2009 Rejo Zenger <rejo@zenger.nl> Copyright 2010-2017  Poweradmin Development Team <http://www.poweradmin.org/credits.html> This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.
 */

/**
 * User profile functions
 *
 * @package Poweradmin
 * @copyright 2007-2010 Rejo Zenger <rejo@zenger.nl>
 * @copyright 2010-2017  Poweradmin Development Team
 * @license http://opensource.org/licenses/GPL-3.0 GPL
 *
 */
require_once 'inc/toolkit.inc.php';

require_once dirname(dirname(dirname(__DIR__))) . '/vendor/poweradmin/Password.php';

/**
 * Verify User has Permission Name
 *
 * Function to see if user has right to do something. It will check if
 * user has "ueberuser" bit set. If it isn't, it will check if the user has
 * the specific permission. It returns "false" if the user doesn't have the
 * right, and "true" if the user has.
 *
 * @param array arg[0] Permission name
 *
 * @return boolean true if user has permission, false otherwise
 */
function verify_permission_local($arg) {
    if (is_array($arg)) {
        $permission = $arg [0];
    } else {
        $permission = $arg;
    }

    static $cache = false;

    if ($cache !== false) {
        return array_key_exists('user_is_ueberuser', $cache) || array_key_exists($permission, $cache);
    }

    global $db;
    if ((!isset($_SESSION['userid'])) || (!is_object($db))) {
        return 0;
    }
    // Set current user ID.
    $userid = $_SESSION['userid'];

    $query = $db->prepare("SELECT
        perm_items.name AS permission
        FROM perm_templ_items
        LEFT JOIN perm_items ON perm_items.id = perm_templ_items.perm_id
        LEFT JOIN perm_templ ON perm_templ.id = perm_templ_items.templ_id
        LEFT JOIN users ON perm_templ.id = users.perm_templ
        WHERE users.id = ?");
    $query->execute(array($userid));
    $cache = $query->fetchAll(PDO::FETCH_GROUP | PDO::FETCH_ASSOC);

    return array_key_exists('user_is_ueberuser', $cache) || array_key_exists($permission, $cache);
}

/**
 * Get a list of all available permission templates
 *
 * @return mixed[] array of templates [id, name, descr]
 */
function list_permission_templates_local() {
    global $db;
    $query = "SELECT * FROM perm_templ ORDER BY name";
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    $template_list = array();
    while ($template = $response->fetchRow()) {
        $template_list [] = array(
            "id" => $template ['id'],
            "name" => $template ['name'],
            "descr" => $template ['descr']
        );
    }
    return $template_list;
}

/**
 * Retrieve all users
 *
 * Its to show_users therefore the odd name. Has to be changed.
 *
 * @param int $id Exclude User ID
 * @param int $rowstart Startring row number
 * @param int $rowamount Number of rows to return this query
 *
 * @return mixed[] array with all users [id,username,fullname,email,description,active,numdomains]
 */
function show_users_local($id = '', $rowstart = 0, $rowamount = 9999999) {

    global $db;
    $add = '';
    if (is_numeric($id)) {
        // When a user id is given, it is excluded from the userlist returned.
        $add = " WHERE users.id!=" . $db->quote($id, 'integer');
    }

    // Make a huge query.
    $query = "SELECT users.id AS id,
	users.username AS username,
	users.fullname AS fullname,
	users.email AS email,
	users.description AS description,
	users.active AS active,
	users.perm_templ AS perm_templ,
	count(zones.owner) AS aantal FROM users
	LEFT JOIN zones ON users.id=zones.owner$add
	GROUP BY
	users.id,
	users.username,
	users.fullname,
	users.email,
	users.description,
	users.perm_templ,
	users.active
	ORDER BY
	users.fullname";

    // Execute the huge query.
    $db->setLimit($rowamount, $rowstart);
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }
    $ret = array();
    while ($r = $response->fetchRow()) {
        $ret [] = array(
            "id" => $r ["id"],
            "username" => $r ["username"],
            "fullname" => $r ["fullname"],
            "email" => $r ["email"],
            "description" => $r ["description"],
            "active" => $r ["active"],
            "numdomains" => $r ["aantal"]
        );
    }
    return $ret;
}

/**
 * Check if Valid User
 *
 * Check if the given $userid is connected to a valid user.
 *
 * @param int $id User ID
 *
 * @return boolean true if user exists, false if users doesnt exist
 */
function is_valid_user_local($id) {
    global $db;
    if (is_numeric($id)) {
        $response = $db->queryOne("SELECT id FROM users WHERE id=" . $db->quote($id, 'integer'));
        return ($response ? true : false);
    }
}

/**
 * Check if Username Exists
 *
 * Checks if a given username exists in the database.
 *
 * @param string $user Username
 *
 * @return boolean true if exists, false if not
 */
function user_exists($user) {
    global $db;
    $response = $db->queryOne("SELECT id FROM users WHERE username=" . $db->quote($user, 'text'));
    return ($response ? true : false);
}

/**
 * Delete User ID
 *
 * Delete a user from the system. Will also delete zones owned by user or
 * re-assign those zones to a new specified owner.
 * $zones is an array of zone 'zid's to delete or re-assign depending on
 * 'target' value [delete,new_owner] and 'newowner' value
 *
 * @param int $uid User ID to delete
 * @param mixed[] $zones Array of zones
 *
 * @return boolean true on success, false otherwise
 */
function delete_user_local($uid, $zones) {
    global $db;

    if (($uid != $_SESSION ['userid'] && !do_hook('verify_permission', 'user_edit_others')) || ($uid == $_SESSION ['userid'] && !do_hook('verify_permission', 'user_edit_own'))) {
        error(ERR_PERM_DEL_USER);
        return false;
    } else {

        if (is_array($zones)) {
            foreach ($zones as $zone) {
                if ($zone ['target'] == "delete") {
                    delete_domain($zone ['zid']);
                } elseif ($zone ['target'] == "new_owner") {
                    add_owner_to_zone($zone ['zid'], $zone ['newowner']);
                }
            }
        }

        $query = "DELETE FROM zones WHERE owner = " . $db->quote($uid, 'integer');
        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }

        $query = "DELETE FROM users WHERE id = " . $db->quote($uid, 'integer');
        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }

        delete_zone_templ_userid($uid);
    }
    return true;
}

/**
 * Delete Permission Template ID
 *
 * @param int $ptid Permission template ID
 *
 * @return boolean true on success, false otherwise
 */
function delete_perm_templ_local($ptid) {
    global $db;
    if (!(do_hook('verify_permission', 'user_edit_templ_perm'))) {
        error(ERR_PERM_DEL_PERM_TEMPL);
    } else {
        $query = "SELECT id FROM users WHERE perm_templ = " . $ptid;
        $response = $db->queryOne($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }

        if ($response) {
            error(ERR_PERM_TEMPL_ASSIGNED);
            return false;
        } else {
            $query = "DELETE FROM perm_templ_items WHERE templ_id = " . $ptid;
            $response = $db->query($query);
            if (PEAR::isError($response)) {
                error($response->getMessage());
                return false;
            }

            $query = "DELETE FROM perm_templ WHERE id = " . $ptid;
            $response = $db->query($query);
            if (PEAR::isError($response)) {
                error($response->getMessage());
                return false;
            }

            return true;
        }
    }
}

/**
 * Modify User Details
 *
 * Edit the information of an user.. sloppy implementation with too many queries.. (2) :)
 *
 * @param int $id User ID
 * @param string $user Username
 * @param string $fullname Full Name
 * @param string $email Email address
 * @param string $perm_templ Permission Template Name
 * @param string $description Description
 * @param int $active Active User
 * @param string $password Password
 *
 * @return boolean true if succesful, false otherwise
 */
function edit_user_local($id, $user, $fullname, $email, $perm_templ, $description, $active, $password) {
    global $db;

    do_hook('verify_permission', 'user_edit_own') ? $perm_edit_own = "1" : $perm_edit_own = "0";
    do_hook('verify_permission', 'user_edit_others') ? $perm_edit_others = "1" : $perm_edit_others = "0";

    if (($id == $_SESSION ["userid"] && $perm_edit_own == "1") || ($id != $_SESSION ["userid"] && $perm_edit_others == "1")) {

        if (!is_valid_email($email)) {
            error(ERR_INV_EMAIL);
            return false;
        }

        if ($active != 1) {
            $active = 0;
        }

        // Before updating the database we need to check whether the user wants to
        // change the username. If the user wants to change the username, we need
        // to make sure it doesn't already exists.
        //
		// First find the current username of the user ID we want to change. If the
        // current username is not the same as the username that was given by the
        // user, the username should apparantly changed. If so, check if the "new"
        // username already exists.

        $query = "SELECT username FROM users WHERE id = " . $db->quote($id, 'integer');
        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }

        $usercheck = array();
        $usercheck = $response->fetchRow();

        if ($usercheck ['username'] != $user) {

            // Username of user ID in the database is different from the name
            // we have been given. User wants a change of username. Now, make
            // sure it doesn't already exist.

            $query = "SELECT id FROM users WHERE username = " . $db->quote($user, 'text');
            $response = $db->queryOne($query);
            if ($response) {
                error(ERR_USER_EXIST);
                return false;
            }
        }

        // So, user doesn't want to change username or, if he wants, there is not
        // another user that goes by the wanted username. So, go ahead!

        $query = "UPDATE users SET username = " . $db->quote($user, 'text') . ",
fullname = " . $db->quote($fullname, 'text') . ",
email = " . $db->quote($email, 'text') . ",";
        if (do_hook('verify_permission', 'user_edit_templ_perm')) {
            $query .= "perm_templ = " . $db->quote($perm_templ, 'integer') . ",";
        }
        $query .= "description = " . $db->quote($description, 'text') . ",
				active = " . $db->quote($active, 'integer');

        if ($password != "") {
            $query .= ", password = " . $db->quote(Poweradmin\Password::hash($password), 'text');
        }

        $query .= " WHERE id = " . $db->quote($id, 'integer');

        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }
    } else {
        error(ERR_PERM_EDIT_USER);
        return false;
    }
    return true;
}

/**
 * Change User Password
 *
 * Change the pass of the user.
 * The user is automatically logged out after the pass change.
 *
 * @param mixed[] $details User Details
 *
 * @return null
 */
function change_user_pass_local($details) {
    global $db;

    if ($details ['newpass'] != $details ['newpass2']) {
        error(ERR_USER_MATCH_NEW_PASS);
        return false;
    }

    $query = "SELECT id, password FROM users WHERE username = " . $db->quote($_SESSION ["userlogin"], 'text');
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    $rinfo = $response->fetchRow();

    if (Poweradmin\Password::verify($details['currentpass'], $rinfo['password'])) {
        $query = "UPDATE users SET password = " . $db->quote(Poweradmin\Password::hash($details['newpass']), 'text') . " WHERE id = " . $db->quote($rinfo ['id'], 'integer');
        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }

        logout(_('Password has been changed, please login.'), 'success');
    } else {
        error(ERR_USER_WRONG_CURRENT_PASS);
        return false;
    }
}

/**
 * Get User FullName from User ID
 *
 * Get a fullname when you have a userid.
 *
 * @param int $id User ID
 *
 * @return string Full Name
 */
function get_fullname_from_userid_local($id) {
    global $db;
    if (is_numeric($id)) {
        $response = $db->query("SELECT fullname FROM users WHERE id=" . $db->quote($id, 'integer'));
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }
        $r = $response->fetchRow();
        return $r ["fullname"];
    } else {
        error(ERR_INV_ARG);
        return false;
    }
}

/**
 * Get User FullName from User ID
 * fixme: Duplicate function
 *
 * Get a fullname when you have a userid.
 *
 * @param int $id User ID
 *
 * @return string Full Name
 */
function get_owner_from_id_local($id) {
    global $db;
    if (is_numeric($id)) {
        $response = $db->queryRow("SELECT fullname FROM users WHERE id=" . $db->quote($id, 'integer'));

        if ($response) {
            return $response ["fullname"];
        } else {
            error(ERR_USER_NOT_EXIST);
        }
    }
    error(ERR_INV_ARG);
}

/**
 * Get Full Names of owners for a Domain ID
 *
 * @todo also fetch the subowners
 *
 * @param int $id Domain ID
 *
 * @return string[] array of owners for domain
 */
function get_fullnames_owners_from_domainid_local($id) {
    global $db;
    if (is_numeric($id)) {
        $response = $db->query("SELECT users.id, users.fullname FROM users, zones WHERE zones.domain_id=" . $db->quote($id, 'integer') . " AND zones.owner=users.id ORDER by fullname");
        if ($response) {
            $names = array();
            while ($r = $response->fetchRow()) {
                $names [] = $r ['fullname'];
            }
            return implode(', ', $names);
        }
        return "";
    }
    error(ERR_INV_ARG);
}

/**
 * Verify User is Zone ID owner
 *
 * @param int $zoneid Zone ID
 *
 * @return int 1 if owner, 0 if not owner
 */
function verify_user_is_owner_zoneid_local($zoneid) {
    global $db;

    $userid = $_SESSION ["userid"];
    if (is_numeric($zoneid)) {
        $response = $db->queryOne("SELECT zones.id FROM zones
				WHERE zones.owner = " . $db->quote($userid, 'integer') . "
				AND zones.domain_id = " . $db->quote($zoneid, 'integer'));
        return ($response ? "1" : "0");
    }
    error(ERR_INV_ARG);
}

/**
 * Get User Details
 *
 * Gets an array of all users and their details
 *
 * @param int $specific User ID (optional)
 *
 * @return mixed[] array of user details
 */
function get_user_detail_list_local($specific) {
    global $db;
    global $ldap_use;

    $userid = $_SESSION ['userid'];

    // fixme: does this actually verify the permission?
    if (v_num($specific)) {
        $sql_add = "AND users.id = " . $db->quote($specific, 'integer');
    } else {
        if (do_hook('verify_permission', 'user_view_others')) {
            $sql_add = "";
        } else {
            $sql_add = "AND users.id = " . $db->quote($userid, 'integer');
        }
    }

    $query = "SELECT users.id AS uid,
			username,
			fullname,
			email,
			description AS descr,
			active,";
    if ($ldap_use) {
        $query .= "use_ldap,";
    }

    $query .= "perm_templ.id AS tpl_id,
			perm_templ.name AS tpl_name,
			perm_templ.descr AS tpl_descr
			FROM users, perm_templ
			WHERE users.perm_templ = perm_templ.id " . $sql_add . "
			ORDER BY username";

    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    while ($user = $response->fetchRow()) {
        $userlist [] = array(
            "uid" => $user ['uid'],
            "username" => $user ['username'],
            "fullname" => $user ['fullname'],
            "email" => $user ['email'],
            "descr" => $user ['descr'],
            "active" => $user ['active'],
            "use_ldap" => isset($user['use_ldap']) ? $user ['use_ldap'] : 0,
            "tpl_id" => $user ['tpl_id'],
            "tpl_name" => $user ['tpl_name'],
            "tpl_descr" => $user ['tpl_descr']
        );
    }
    return $userlist;
}

/**
 * Get List of Permissions
 *
 * Get a list of permissions that are available. If first argument is "0", it
 * should return all available permissions. If the first argument is > "0", it
 * should return the permissions assigned to that particular template only. If
 * second argument is true, only the permission names are returned.
 *
 * @param int $templ_id Template ID (optional) [default=0]
 * @param boolean $return_name_only Return name only or all details (optional) [default=false]
 *
 * @return mixed[] array of permissions [id,name,descr] or permission names [name]
 */
function get_permissions_by_template_id_local($templ_id = 0, $return_name_only = false) {
    global $db;

    $limit = '';
    if ($templ_id > 0) {
        $limit = ", perm_templ_items
			WHERE perm_templ_items.templ_id = " . $db->quote($templ_id, 'integer') . "
			AND perm_templ_items.perm_id = perm_items.id";
    }

    $query = "SELECT perm_items.id AS id,
			perm_items.name AS name,
			perm_items.descr AS descr
			FROM perm_items" . $limit . "
			ORDER BY name";
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    $permission_list = array();
    while ($permission = $response->fetchRow()) {
        if ($return_name_only == false) {
            $permission_list [] = array(
                "id" => $permission ['id'],
                "name" => $permission ['name'],
                "descr" => $permission ['descr']
            );
        } else {
            $permission_list [] = $permission ['name'];
        }
    }
    return $permission_list;
}

/**
 * Get name and description of template from Template ID
 *
 * @param int $templ_id Template ID
 *
 * @return mixed[] Template details
 */
function get_permission_template_details_local($templ_id) {
    global $db;

    $query = "SELECT *
			FROM perm_templ
			WHERE perm_templ.id = " . $db->quote($templ_id, 'integer');

    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    $details = $response->fetchRow();
    return $details;
}

/**
 * Add a Permission Template
 *
 * @param mixed[] $details Permission template details [templ_name,templ_descr,perm_id]
 *
 * @return boolean true on success, false otherwise
 */
function add_perm_templ_local($details) {
    global $db;
    global $db_type;

    // Fix permission template name and description first.

    $query = "INSERT INTO perm_templ (name, descr)
			VALUES (" . $db->quote($details ['templ_name'], 'text') . ", " . $db->quote($details ['templ_descr'], 'text') . ")";

    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    if ($db_type == 'pgsql') {
        $perm_templ_id = $db->lastInsertId('perm_templ_id_seq');
    } else {
        $perm_templ_id = $db->lastInsertId();
    }

    if (isset($details ['perm_id'])) {
        foreach ($details ['perm_id'] as $perm_id) {
            $query = "INSERT INTO perm_templ_items (templ_id, perm_id) VALUES (" . $db->quote($perm_templ_id, 'integer') . "," . $db->quote($perm_id, 'integer') . ")";
            $response = $db->query($query);
            if (PEAR::isError($response)) {
                error($response->getMessage());
                return false;
            }
        }
    }

    return true;
}

/**
 * Update permission template details
 *
 * @param mixed[] $details Permission Template Details
 *
 * @return boolean true on success, false otherwise
 */
function update_perm_templ_details_local($details) {
    global $db;

    // Fix permission template name and description first.

    $query = "UPDATE perm_templ
			SET name = " . $db->quote($details ['templ_name'], 'text') . ",
			descr = " . $db->quote($details ['templ_descr'], 'text') . "
			WHERE id = " . $db->quote($details ['templ_id'], 'integer');
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    // Now, update list of permissions assigned to this template. We could do
    // this The Correct Way [tm] by comparing the list of permissions that are
    // currently assigned with a list of permissions that should be assigned and
    // apply the difference between these two lists to the database. That sounds
    // like too much work. Just delete all the permissions currently assigned to
    // the template, than assign all the permessions the template should have.

    $query = "DELETE FROM perm_templ_items WHERE templ_id = " . $details ['templ_id'];
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    if (isset($details ['perm_id'])) {
        foreach ($details ['perm_id'] as $perm_id) {
            $query = "INSERT INTO perm_templ_items (templ_id, perm_id) VALUES (" . $db->quote($details ['templ_id'], 'integer') . "," . $db->quote($perm_id, 'integer') . ")";
            $response = $db->query($query);
            if (PEAR::isError($response)) {
                error($response->getMessage());
                return false;
            }
        }
    }

    return true;
}

/**
 * Update User Details
 *
 * @param mixed[] $details User details
 *
 * @return boolean true on success, false otherise
 */
function update_user_details_local($details) {
    global $db;

    do_hook('verify_permission', 'user_edit_own') ? $perm_edit_own = "1" : $perm_edit_own = "0";
    do_hook('verify_permission', 'user_edit_others') ? $perm_edit_others = "1" : $perm_edit_others = "0";
    do_hook('verify_permission', 'templ_perm_edit') ? $perm_templ_perm_edit = "1" : $perm_templ_perm_edit = "0";
    do_hook('verify_permission', 'user_is_ueberuser') ? $perm_is_godlike = "1" : $perm_is_godlike = "0";

    if (($details ['uid'] == $_SESSION ["userid"] && $perm_edit_own == "1") || ($details ['uid'] != $_SESSION ["userid"] && $perm_edit_others == "1")) {

        if (!is_valid_email($details ['email'])) {
            error(ERR_INV_EMAIL);
            return false;
        }

        if (!isset($details ['active']) || $details ['active'] != "on") {
            $active = 0;
        } else {
            $active = 1;
        }
        if (isset($details ['use_ldap'])) {
            $use_ldap = 1;
        } else {
            $use_ldap = 0;
        }

        // Before updating the database we need to check whether the user wants to
        // change the username. If the user wants to change the username, we need
        // to make sure it doesn't already exists.
        //
        // First find the current username of the user ID we want to change. If the
        // current username is not the same as the username that was given by the
        // user, the username should apparantly changed. If so, check if the "new"
        // username already exists.
        $query = "SELECT username FROM users WHERE id = " . $db->quote($details ['uid'], 'integer');
        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }

        $usercheck = array();
        $usercheck = $response->fetchRow();

        if ($usercheck ['username'] != $details ['username']) {
            // Username of user ID in the database is different from the name
            // we have been given. User wants a change of username. Now, make
            // sure it doesn't already exist.
            $query = "SELECT id FROM users WHERE username = " . $db->quote($details ['username'], 'text');
            $response = $db->queryOne($query);
            if ($response) {
                error(ERR_USER_EXIST);
                return false;
            }
        }

        // So, user doesn't want to change username or, if he wants, there is not
        // another user that goes by the wanted username. So, go ahead!

        $query = "UPDATE users SET username = " . $db->quote($details ['username'], 'text') . ",
            fullname = " . $db->quote($details ['fullname'], 'text') . ",
            email = " . $db->quote($details ['email'], 'text') . ",
            description = " . $db->quote($details ['descr'], 'text') . ",
        active = " . $db->quote($active, 'integer');

        // If the user is alllowed to change the permission template, set it.
        if ($perm_templ_perm_edit == "1") {
            $query .= ", perm_templ = " . $db->quote($details ['templ_id'], 'integer');
        }

        // If the user is allowed to change the use_ldap flag, set it.
        if ($perm_is_godlike == "1") {
            $query .= ", use_ldap = " . $db->quote($use_ldap, 'integer');
        }

        if (isset($details ['password']) && $details ['password'] != "") {
            $query .= ", password = " . $db->quote(Poweradmin\Password::hash($details['password'], 'text'));
        }

        $query .= " WHERE id = " . $db->quote($details ['uid'], 'integer');

        $response = $db->query($query);
        if (PEAR::isError($response)) {
            error($response->getMessage());
            return false;
        }
    } else {
        error(ERR_PERM_EDIT_USER);
        return false;
    }
    return true;
}

/**
 * Add a new user
 *
 * @param mixed[] $details Array of User details
 *
 * @return boolean true on success, false otherwise
 */
function add_new_user_local($details) {
    global $db;

    if (!do_hook('verify_permission', 'user_add_new')) {
        error(ERR_PERM_ADD_USER);
        return false;
    } elseif (user_exists($details ['username'])) {
        error(ERR_USER_EXIST);
        return false;
    } elseif (!is_valid_email($details ['email'])) {
        error(ERR_INV_EMAIL);
        return false;
    } elseif ($details ['active'] == 1) {
        $active = 1;
    } else {
        $active = 0;
    }

    $query = "INSERT INTO users (username, password, fullname, email, description,";
    if (do_hook('verify_permission', 'user_edit_templ_perm')) {
        $query .= ' perm_templ,';
    }

    $password_hash = Poweradmin\Password::hash($details['password']);

    $query .= " active) VALUES (" . $db->quote($details ['username'], 'text') . ", " . $db->quote($password_hash, 'text') . ", " . $db->quote($details ['fullname'], 'text') . ", " . $db->quote($details ['email'], 'text') . ", " . $db->quote($details ['descr'], 'text') . ", ";
    if (do_hook('verify_permission', 'user_edit_templ_perm')) {
        $query .= $db->quote($details ['perm_templ'], 'integer') . ", ";
    }
    $query .= $db->quote($active, 'integer') . ")";
    $response = $db->query($query);
    if (PEAR::isError($response)) {
        error($response->getMessage());
        return false;
    }

    return true;
}